Senior Enterprise Risk Analyst

Job Purpose

We are seeking a strategic and detail-oriented Senior Technology Enterprise Risk Management Analyst to join our Enterprise Technology Risk team, a subgroup within Enterprise Risk. This individual will play a critical role in advancing the organization's risk maturity through the

• support and execution of the Annual Enterprise Technology Risk Assessment (ETRA),
• the development, implementation, and ongoing management of risk and performance indicators - known collectively as Management Information (MI) using DA and automation concepts
• supporting targeted assessments,
• monitoring emerging risks, and
• managing aspects of the issue life cycle resulting from enterprise risk assessments.

The ideal candidate is a self-starter with 5+ years of relevant experience in technology risk management or related fields, and a passion and proven ability for building data-driven, mature, automated and forward-looking risk practices that align with organizational strategy.

Responsibilities

• Risk Measurement
  • Assist business leaders with developing or enhancing risk appetite statements that are able to evolve and be measured quantitatively
  • Design, implement, and manage a comprehensive suite of risk and performance indicators across business units and risk categories.
  • Collaborate with business owners and risk partners to align indicators with risk appetite, business objectives, and regulatory expectations.
  • Develop and maintain dashboards (Tableau, python etc.) and reporting tools to provide timely insights to senior management and the Board.
  • Promote risk management efficiencies through the implementation and use of automated routines.
• Enterprise Risk & Controls
  • Support and drive control library and risk inventory management. Acts as an expert in how to identify and document risks and create and maintain controls and control attributes.
  • Lead or support the facilitation of enterprise-wide and targeted risk assessments, including risk identification, evaluation, and prioritization.
  • Analyze qualitative and quantitative data to inform the organization's risk profile.
  • Assist in the development of risk mitigation strategies and action plans with business units.
• Emerging Risk Monitoring
  • Conduct horizon scanning to identify, evaluate, and track emerging risks and macro-level trends (e.g., regulatory, technological).
  • Prepare and present emerging risk reports and insights for leadership consideration and potential scenario analysis.
• Issue and Action Management
  • Coordinate and track issues resulting from Enterprise Risk Assessment and related action plans through resolution, ensuring timely remediation and escalation where appropriate.
  • Collaborate with risk and business owners to validate issue status, risk exposure, and supporting documentation.
  • Provide oversight reporting on open issues for senior management and risk committees as appropriate.
• Governance & Reporting
  • Contribute to the preparation of materials for risk committees, executive leadership, and Board reporting.
  • Ensure risk management documentation is accurate, current, and aligned with policy and framework requirements.
  • Support policy and framework updates as needed. This will include policy and procedure creation and update as well as collaboration with other departments on ERM and other policies and procedures.
• Collaboration & Advisory
  • Serve as a key liaison and trusted advisor between the ERM function and stakeholders across the enterprise-including Legal, Compliance, Internal Audit, Technology, Operations, and Business Line teams-to promote understanding, ownership, transparency, alignment, and shared accountability for risk.
  • Promote and advocate for the risk department in a professional manner
  • Communicate risk insights, initiatives, and expectations in a clear, accessible way to both technical and non-technical audiences.
  • Promote a risk-aware culture by helping educate stakeholders on risk frameworks, tools, and processes.
  • Provide support to the Third Party Risk Management & Procurement programs as needed
  • Support the redesign and content development of the risk SharePoint site.
  • Perform other duties as assigned

Knowledge and Experience

• Bachelor's degree in Business Administration, Finance, Risk Management, Technology Management or related fields.
• 5+ years of experience in enterprise risk management, internal audit, compliance, or related discipline.
• Proven experience creating and managing risk indicators and conducting enterprise risk assessments.
• Experience creating complex analytics using coding, scripting, querying, dashboard technologies, and setting up supporting infrastructure components such as SQL servers. Python, R, VBA, Java Script, or Tableau scripting experience highly desired.
• Experience managing issue remediation processes, particularly in support of enterprise risk and control remediation efforts.
• Strong analytical, quantitative, and critical thinking skills.
• Excellent communication skills, both written and verbal, with experience in preparing executive-level reporting.
• Proficiency in risk management software and data visualization tools (e.g., GRC, SNOW and other risk tools).

Preferred Knowledge and Experience

• Professional certifications such as CRISC, CRM, FRM, CERA, or related designations.
• Experience working in highly regulated industries, Financial Services and or Mortgage preferred.
• Familiarity with emerging risk areas (cybersecurity, AI and/or stablecoins).

#LI-HR1 #LI-ONSITE